<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 01 Oct 2026 05:30:58 +0000</lastBuildDate>
    <item>
      <title>27a15c5b-e164-4b8c-9c67-92ac45e303b6</title>
      <link>https://vulnerability.circl.lu/sighting/27a15c5b-e164-4b8c-9c67-92ac45e303b6/export</link>
      <description>{"uuid": "27a15c5b-e164-4b8c-9c67-92ac45e303b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61722", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwjbljmgge27", "content": "CVE-2026-61722 FluidSynth 2.5.0-2.5.6: crafted DLS file triggers integer overflow in the native parser, bypassing chunk-size checks and causing a denial of service through massive out-of-bounds iterations. CVSS 6.8. Patch to https://www.valtersit.com/cve/CVE-2026-61722/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T17:00:30.094660Z"}</description>
      <content:encoded>{"uuid": "27a15c5b-e164-4b8c-9c67-92ac45e303b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61722", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwjbljmgge27", "content": "CVE-2026-61722 FluidSynth 2.5.0-2.5.6: crafted DLS file triggers integer overflow in the native parser, bypassing chunk-size checks and causing a denial of service through massive out-of-bounds iterations. CVSS 6.8. Patch to https://www.valtersit.com/cve/CVE-2026-61722/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T17:00:30.094660Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/27a15c5b-e164-4b8c-9c67-92ac45e303b6/export</guid>
      <pubDate>Sun, 27 Sep 2026 17:00:30 +0000</pubDate>
    </item>
    <item>
      <title>46bc657f-4569-401d-9a1b-a7c23241f29e</title>
      <link>https://vulnerability.circl.lu/sighting/46bc657f-4569-401d-9a1b-a7c23241f29e/export</link>
      <description>{"uuid": "46bc657f-4569-401d-9a1b-a7c23241f29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61722", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117344071030086838", "content": "CVE-2026-61722 FluidSynth 2.5.0-2.5.6: crafted DLS file triggers integer overflow in the native parser, bypassing chunk-size checks and causing a denial of service through massive out-of-bounds iterations. CVSS 6.8. Patch to https://www.valtersit.com/cve/CVE-2026-61722/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T17:00:29.486639Z"}</description>
      <content:encoded>{"uuid": "46bc657f-4569-401d-9a1b-a7c23241f29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61722", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117344071030086838", "content": "CVE-2026-61722 FluidSynth 2.5.0-2.5.6: crafted DLS file triggers integer overflow in the native parser, bypassing chunk-size checks and causing a denial of service through massive out-of-bounds iterations. CVSS 6.8. Patch to https://www.valtersit.com/cve/CVE-2026-61722/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T17:00:29.486639Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/46bc657f-4569-401d-9a1b-a7c23241f29e/export</guid>
      <pubDate>Sun, 27 Sep 2026 17:00:29 +0000</pubDate>
    </item>
    <item>
      <title>ba81e19e-a375-48bd-89a6-41d439ff3935</title>
      <link>https://vulnerability.circl.lu/sighting/ba81e19e-a375-48bd-89a6-41d439ff3935/export</link>
      <description>{"uuid": "ba81e19e-a375-48bd-89a6-41d439ff3935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61720", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117341004563392922", "content": "CVE-2026-61720 FluidSynth SF2 parser DoS: zero-sized DMOD chunk wraps count to UINT_MAX, triggering billions of allocations and memory exhaustion. CVSS 6.2. Patched in 2.5.6, no workaround. Update now. https://www.valtersit.com/cve/CVE-2026-61720/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T04:00:39.097895Z"}</description>
      <content:encoded>{"uuid": "ba81e19e-a375-48bd-89a6-41d439ff3935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61720", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117341004563392922", "content": "CVE-2026-61720 FluidSynth SF2 parser DoS: zero-sized DMOD chunk wraps count to UINT_MAX, triggering billions of allocations and memory exhaustion. CVSS 6.2. Patched in 2.5.6, no workaround. Update now. https://www.valtersit.com/cve/CVE-2026-61720/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T04:00:39.097895Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ba81e19e-a375-48bd-89a6-41d439ff3935/export</guid>
      <pubDate>Sun, 27 Sep 2026 04:00:39 +0000</pubDate>
    </item>
    <item>
      <title>f41bc227-86c2-42c3-9e6a-f40f2570c4d2</title>
      <link>https://vulnerability.circl.lu/sighting/f41bc227-86c2-42c3-9e6a-f40f2570c4d2/export</link>
      <description>{"uuid": "f41bc227-86c2-42c3-9e6a-f40f2570c4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61720", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwhvyyckfw2j", "content": "CVE-2026-61720 FluidSynth SF2 parser DoS: zero-sized DMOD chunk wraps count to UINT_MAX, triggering billions of allocations and memory exhaustion. CVSS 6.2. Patched in 2.5.6, no workaround. Update now. https://www.valtersit.com/cve/CVE-2026-61720/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T04:00:37.898485Z"}</description>
      <content:encoded>{"uuid": "f41bc227-86c2-42c3-9e6a-f40f2570c4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61720", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwhvyyckfw2j", "content": "CVE-2026-61720 FluidSynth SF2 parser DoS: zero-sized DMOD chunk wraps count to UINT_MAX, triggering billions of allocations and memory exhaustion. CVSS 6.2. Patched in 2.5.6, no workaround. Update now. https://www.valtersit.com/cve/CVE-2026-61720/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-27T04:00:37.898485Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f41bc227-86c2-42c3-9e6a-f40f2570c4d2/export</guid>
      <pubDate>Sun, 27 Sep 2026 04:00:37 +0000</pubDate>
    </item>
    <item>
      <title>3ec3539c-21b0-4564-9f85-4a4eb11123e7</title>
      <link>https://vulnerability.circl.lu/sighting/3ec3539c-21b0-4564-9f85-4a4eb11123e7/export</link>
      <description>{"uuid": "3ec3539c-21b0-4564-9f85-4a4eb11123e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61721", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117316033333467264", "content": "CVE-2026-61721 FluidSynth out-of-bounds read via crafted DLS file, up to memory disclosure and DoS. CVSS 8. Fixed in 2.5.6, update now. https://www.valtersit.com/cve/CVE-2026-61721/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-22T18:10:24.076121Z"}</description>
      <content:encoded>{"uuid": "3ec3539c-21b0-4564-9f85-4a4eb11123e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61721", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117316033333467264", "content": "CVE-2026-61721 FluidSynth out-of-bounds read via crafted DLS file, up to memory disclosure and DoS. CVSS 8. Fixed in 2.5.6, update now. https://www.valtersit.com/cve/CVE-2026-61721/ #CVE #infosec #FluidSynth", "creation_timestamp": "2026-09-22T18:10:24.076121Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3ec3539c-21b0-4564-9f85-4a4eb11123e7/export</guid>
      <pubDate>Tue, 22 Sep 2026 18:10:24 +0000</pubDate>
    </item>
    <item>
      <title>5cdfac05-5a1b-432d-a1fc-f58b815cb51e</title>
      <link>https://vulnerability.circl.lu/sighting/5cdfac05-5a1b-432d-a1fc-f58b815cb51e/export</link>
      <description>{"uuid": "5cdfac05-5a1b-432d-a1fc-f58b815cb51e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61721", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy3sjpcww2z", "content": "\ud83d\udfe0 CVE-2026-61721 - High (8)\n\nFluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61721/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T21:01:47.586940Z"}</description>
      <content:encoded>{"uuid": "5cdfac05-5a1b-432d-a1fc-f58b815cb51e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61721", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy3sjpcww2z", "content": "\ud83d\udfe0 CVE-2026-61721 - High (8)\n\nFluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61721/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T21:01:47.586940Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5cdfac05-5a1b-432d-a1fc-f58b815cb51e/export</guid>
      <pubDate>Sun, 20 Sep 2026 21:01:47 +0000</pubDate>
    </item>
  </channel>
</rss>
